Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iIsEjMit86dV9mF4e61pcdT0FA0.roa
File:                     iIsEjMit86dV9mF4e61pcdT0FA0.roa (raw, json)
Hash identifier:          A+BB2SPRP4cmQLYk5Yirf1kKcBj+0gYedn3siSJv1X4=
Subject key identifier:   88:8B:04:8C:C8:AD:F3:A7:55:F6:61:78:7B:AD:69:71:D4:F4:14:0D
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0196CABAA0C143A73EA8386C5F642636D03E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iIsEjMit86dV9mF4e61pcdT0FA0.roa
Signing time:             Tue 13 May 2025 17:39:10 +0000
ROA not before:           Tue 13 May 2025 17:39:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     28753
IP address blocks:        45.9.116.0/24 maxlen: 24
                          45.9.122.0/24 maxlen: 24
                          45.128.76.0/24 maxlen: 24
                          45.154.58.0/24 maxlen: 24
                          93.190.244.0/24 maxlen: 24
                          2a04:9f40::/29 maxlen: 29
                          2a06:1184:101::/48 maxlen: 48
                          2a06:3bc0::/29 maxlen: 29
                          2a07:8a40::/29 maxlen: 29
                          2a09:17c1:66::/48 maxlen: 48
                          2a09:17c1:77::/48 maxlen: 48
                          2a0a:2d06:102::/48 maxlen: 48
                          2a0a:2d06:103::/48 maxlen: 48
                          2a0c:7886:99::/48 maxlen: 48
                          2a0c:7886:100::/48 maxlen: 48
                          2a0e:15c7:99::/48 maxlen: 48
                          2a0e:1a83:77::/48 maxlen: 48
                          2a0e:f603:66::/48 maxlen: 48
                          2a0f:140::/29 maxlen: 29
                          2a0f:1206:55::/48 maxlen: 48
                          2a0f:1206:66::/48 maxlen: 48
                          2a0f:2500::/29 maxlen: 29
                          2a0f:3d86:88::/48 maxlen: 48
                          2a0f:3d86:99::/48 maxlen: 48
                          2a0f:cc00::/29 maxlen: 29
                          2a0f:d200::/29 maxlen: 29
                          2a0f:da40::/29 maxlen: 29
                          2a0f:db40::/29 maxlen: 29
                          2a0f:dfc0::/29 maxlen: 29
                          2a0f:e040::/29 maxlen: 29
                          2a0f:e1c1:22::/48 maxlen: 48
                          2a0f:e202:44::/48 maxlen: 48
                          2a0f:e202:55::/48 maxlen: 48
                          2a0f:e4c0::/29 maxlen: 29
                          2a0f:e6c6:100::/48 maxlen: 48
                          2a0f:e6c6:101::/48 maxlen: 48
                          2a0f:e7c6:66::/48 maxlen: 48
                          2a0f:e7c6:77::/48 maxlen: 48
                          2a0f:e7c6:88::/48 maxlen: 48
                          2a0f:e844:22::/48 maxlen: 48
                          2a0f:ea44:66::/48 maxlen: 48
                          2a0f:ea44:77::/48 maxlen: 48
                          2a0f:fc00::/29 maxlen: 29
                          2a12:ac46:77::/48 maxlen: 48
                          2a12:ecc0:168::/48 maxlen: 48
                          2a12:ecc0:178::/48 maxlen: 48
                          2a13:18c6:77::/48 maxlen: 48
                          2a13:18c6:88::/48 maxlen: 48
                          2a13:7d80::/29 maxlen: 29
                          2a13:8c86:10a::/48 maxlen: 48
                          2a13:8c86:130::/48 maxlen: 48
                          2a13:c900:88::/48 maxlen: 48
                          2a13:c900:99::/48 maxlen: 48
                          2a13:e107:99::/48 maxlen: 48
                          2a13:e107:9c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 13 May 2025 17:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:ba:a0:c1:43:a7:3e:a8:38:6c:5f:64:26:36:d0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May 13 17:39:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=888b048cc8adf3a755f661787bad6971d4f4140d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:63:4a:ea:fa:fa:e7:ca:b7:38:21:00:f1:
                    b8:c9:01:7b:c7:c3:52:42:90:5f:10:0b:c9:35:9f:
                    c0:1e:c8:de:74:51:75:d9:e1:ee:4a:25:fa:f3:a7:
                    01:ed:0b:3f:db:34:26:4c:ef:48:19:ec:2b:27:24:
                    eb:f2:ab:1a:15:8b:99:24:61:d0:b0:51:9c:43:ac:
                    b6:17:06:ce:4d:34:66:ea:52:67:bd:14:16:bd:11:
                    c0:a6:78:32:6f:31:eb:28:36:70:8c:cb:16:6e:aa:
                    2f:0b:e1:96:4a:81:3c:fc:99:10:bf:a1:c4:c2:28:
                    54:c2:8f:49:9b:97:0f:01:fb:bc:ba:70:8f:40:d8:
                    a2:a8:d4:b5:0b:86:88:a8:e2:cd:a3:c2:a5:0b:3b:
                    4a:63:46:32:54:1a:78:9e:7c:5e:b8:92:3e:b2:85:
                    c8:46:2e:ef:24:f7:f3:b5:e3:bd:d0:3f:7f:fa:ef:
                    3f:63:04:6c:16:bc:09:82:ea:f4:6f:8c:4a:92:f9:
                    ce:5b:82:b8:6f:39:65:e8:c2:6e:38:ae:f0:28:fc:
                    e7:77:23:51:8f:ac:51:c6:4d:35:f9:13:5c:35:df:
                    5d:d5:d0:4f:16:b9:16:5c:13:4c:48:f0:2d:d3:c3:
                    35:38:81:6f:d5:01:53:05:9b:a5:b4:c0:8b:8d:ec:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8B:04:8C:C8:AD:F3:A7:55:F6:61:78:7B:AD:69:71:D4:F4:14:0D
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iIsEjMit86dV9mF4e61pcdT0FA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.116.0/24
                  45.9.122.0/24
                  45.128.76.0/24
                  45.154.58.0/24
                  93.190.244.0/24
                IPv6:
                  2a04:9f40::/29
                  2a06:1184:101::/48
                  2a06:3bc0::/29
                  2a07:8a40::/29
                  2a09:17c1:66::/48
                  2a09:17c1:77::/48
                  2a0a:2d06:102::/47
                  2a0c:7886:99::/48
                  2a0c:7886:100::/48
                  2a0e:15c7:99::/48
                  2a0e:1a83:77::/48
                  2a0e:f603:66::/48
                  2a0f:140::/29
                  2a0f:1206:55::/48
                  2a0f:1206:66::/48
                  2a0f:2500::/29
                  2a0f:3d86:88::/48
                  2a0f:3d86:99::/48
                  2a0f:cc00::/29
                  2a0f:d200::/29
                  2a0f:da40::/29
                  2a0f:db40::/29
                  2a0f:dfc0::/29
                  2a0f:e040::/29
                  2a0f:e1c1:22::/48
                  2a0f:e202:44::/48
                  2a0f:e202:55::/48
                  2a0f:e4c0::/29
                  2a0f:e6c6:100::/47
                  2a0f:e7c6:66::/48
                  2a0f:e7c6:77::/48
                  2a0f:e7c6:88::/48
                  2a0f:e844:22::/48
                  2a0f:ea44:66::/48
                  2a0f:ea44:77::/48
                  2a0f:fc00::/29
                  2a12:ac46:77::/48
                  2a12:ecc0:168::/48
                  2a12:ecc0:178::/48
                  2a13:18c6:77::/48
                  2a13:18c6:88::/48
                  2a13:7d80::/29
                  2a13:8c86:10a::/48
                  2a13:8c86:130::/48
                  2a13:c900:88::/48
                  2a13:c900:99::/48
                  2a13:e107:99::/48
                  2a13:e107:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:00:75:a4:f6:5e:b2:f8:9f:bc:aa:d0:11:b6:f4:a7:bc:1a:
         06:d6:25:71:d0:ac:a5:d4:36:0e:03:3a:e8:01:66:24:f6:3b:
         ff:12:4e:e7:42:db:46:7f:64:1d:2b:af:23:6c:06:f1:01:c0:
         3a:d8:ff:35:28:01:77:be:5f:eb:2d:a8:f4:c5:48:13:60:9d:
         f5:df:77:58:9f:3e:a4:94:a1:67:c5:68:a2:dd:11:77:8e:fc:
         e6:5f:41:ac:a1:1a:13:70:93:38:b8:4e:b1:cd:b4:52:6e:4b:
         a2:41:29:ed:a6:bd:09:e8:c4:cf:f2:97:d4:10:af:a5:41:32:
         aa:96:4a:82:29:35:44:d7:c3:92:4d:88:bf:fb:bc:54:ee:66:
         3a:29:a5:f7:df:d8:ed:b1:46:19:3c:c6:cd:87:c7:0e:69:81:
         58:cb:43:4d:f2:a7:61:8a:81:46:2e:3e:84:23:3a:cc:87:2e:
         05:01:74:91:71:95:3e:c5:22:20:52:9b:84:3f:da:ea:27:7f:
         d9:57:eb:70:12:9d:d3:ca:e3:2d:41:0e:2b:78:0f:c0:bd:60:
         d6:d3:0c:ca:21:46:a8:7f:56:c3:2f:4b:46:1d:37:1a:a6:05:
         76:74:d9:cf:91:30:4a:86:97:07:e8:3f:8c:db:10:30:88:64:
         4f:fe:2a:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:32 2025 by rpki-client